METHOD AND APPARATUS FOR CHOOSING A COMBINATION OF LOGIC FOR 
GENERATING RANDOM NUMBERS USING A DIFFERENCE SIGNAL 



This application claims priority to Provisional Serial No. 60/454,815 filed March 14, 2003. 
FIELD OF THE INVENTION 

[0001] The invention relates to the phenomenon of metastability, and the use of 
metastability in the field of random number generation. 

5 BACKGROUND ART 

[0002] The violation of the operating conditions of the flip-flops can cause them to go 
into an unstable (metastable) state. Metastability can occur when both inputs to a simple 
latch are set at a logic high (11) and are subsequently set at a logic low (00). Metastability 
can cause the latch outputs to oscillate unpredictably in a statistically known manner. Such 
10 metastable values are then detected by other circuitry as different logic states. Metastable 
latches also arrive at a random stable state after a period of time. 

[0003] It has been found that intentionally inducing metastability provides the ability to 
harness the unpredictability of metastable flip-flop outputs as a random number generator. 

[0004] The use of multiple meta-stable elements to generate a random event has been 
15 the subject of previous patent applications for random number generators by the current 
inventors. In such a random number generator, there are two latches that are placed in a 
metastable state, which resolves to a known but unpredictable condition. The outputs of the 
latches are compared, and if they differ, then a bit value is chosen from an unbiased stream 
of bits. This method works especially well if the meta-stable elements are biased (meaning 
20 that they produce more ones than zeros, or vice versa). 

[0005] A drawback of previous metastable random number generator circuits was that 
the metastable elements were symmetrical. In some cases a tunable delay has been 
introduced for at least one of the elements because there are sometimes slight differences in 
even identical circuits due to manufacturing variations, temperature variations, etc. 
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SUMMARY OF THE INVENTION 



[0006] The present invention provides a new method and apparatus for generating 
random numbers by using the metastability of simple latches. 

[0007] According to a first aspect of the invention, a random number generator uses 
5 metarStable elements that are synchronized by a set of flip-flops. The output of the 

stabilizing flip-flops are compared and used to generate counter events with a minimum of 
hardware. 

[0008] According to another aspect of the present invention, the random number 
generator provides a more practical implementation as it does not rely on the metastable 
10 elements being symmetrical. Nevertheless, if two meta-stable elements are not identical, 
then it is also possible that they would differ almost always. Thus, the stream of chosen bits 
would be as predictable as the stream of unbiased bits. We offer a solution to this problem 
as well. 

BRIEF DESCRIPTION OF THE DRAWING 

15 [0009] Fig. 1 illustrates an aspect of the random number generator according to the 
present invention, wherein an arrangement of latches is shown receiving a clock signal 
generated from the circuit in Fig. 1. 

[0010] Figs. 2A and 2B illustrate additional aspects according to the present invention. 

[0011] Figs. 3A and 3B illustrates waveform outputs according to the present invention. 

20 DETAILED EMBODIMENTS 

[0012] It is understood by persons of ordinary skill in the art that the types of gates 
shown herein below were selected for explanatory purposes, and there can be different 
arrangements of different type of gates in terms of size, function and connectivity that fall 
within the spirit of the invention and the scope of the appended claims. 

25 [0013] Fig. 1 illustrates a pair of D flip-flips 205, 210 that actually form a 74LS74 

semiconductor, which is a dual positive edge triggered pair of flip-flops with preset, clear 
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and complementary outputs. It can be seen in Fig. 2 that the preset 4, 10 and clear inputs 1, 
13 receive a voltage from 5V source 204 after a drop across current limiting resistor ROOl. 
A low logic level on the preset or clear inputs will set or reset the outputs regardless of the 
logic levels of the other inputs. Applicants stress again that the practical examples are 
5 provided for illustrative purposes, and in no way should the instant invention and the 

appended claims be interpreted to limit the invention to these specific semiconductors or 
equivalents thereof. Boolean equivalents can be used for any of the circuitry shown and 
described. 

[0014] The clock source 100 is connected to the clock input 3 of flip-flop 200. The 
10 clock input 11 of flip-flop 205 receives its clock input via XOR 203, which has a first input 
5 from the source 100 and a second input 4 of a voltage remainder of a 5 volt source that is 
dropped across 4.7K ohm Resistor R006 thus converting XOR 203 to a simple inverter. 
Therefore, the clock input 1 1 of flip-flop 205 is high only when pin 6 on flip-flop 200 is 
low. 

15 [0015] In the arrangement of flip flops-200, 205, the QB AR of flip-flop 200 is looped 
back to the D inputs 2, 12 of both flip-flops 200, 205. The Q output 5 of flip-flop 200 is 
provided to line A (Acquisition) shown in Figs. 2 A and 2B. 

[0016] The Q output 9 of flip-flop 205 is provided to pins 1, 5, 9 and 12 of a 74LS00, 
which is a quad 2 input NAND gate circuit shown in Fig. 2. The outputs of quad gates 210 
20 and 215 are cross connected to their inputs forming a latch, and the same arrangement up is 
employed for 220, and 225. Again the 741^00 is shown for illustrative purposes and does 
not limit the instant invention as equivalent circuitry can be used. The Q output of pin 9 of 
flip flop 205 is also provided to an input labeled "STIMULUS" which stimulates the latches 
to a metastable state. The "STIMULUS" signal is used in figure 2B to advance LFSR 285. 

25 [0017] The output of NAND gate 210 is latchO and the output of NAND gate 220 is 
latch 1. The latchO and latch 1 outputs, along with the acquisition output are provided to the 
arrangement of flip-flops shown in Fig. 2 A. It is expected that the outputs latchO and latch 1 
will have metastable voltage levels which are neither a logical "zero" or a logical "one", 
therefore the circuit in figure 2A converts possible metastable signals to known logical 

30 "zeros" and "ones" as well as bringing the timing of these metastable values into 
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synchronicity with the acquisition signal. Should the latches come out of their metastable 
state in a timely fashion the synchronizer circuit in Fig. 2 A will capture this random result. 
The outputs of the parallel chains of flip-flops in figure 2A are then XOR'ed and the output 
of which is labeled "Mistake." The "Mistake" signal represents a disagreement between the 
5 latchO and latch 1 signals. Since latchO and latch 1 are a random result based on metastable 
behavior they will disagree (a "mistake") about half the time under specialized 
circumstances. However such ideal conditions will in general not be achieved thus creating 
additional uncertainty about when "Mistakes" will occur. 

[0018] Fig. 2B shows an arrangement using the input mistake, acquisition and stimulus 
10 to provide an output from a shift register resulting in random bits shown in the waveforms 
in Figs. 3 A and 3B. 

[0019] The XOR gate 265, shown in Fig. 2B compares the mistake signal with a 
previously stored mistake signal. The stored version of the mistake signal is kept in flip-flop 
264. If the stored version of mistake disagrees with the current version a bit is stored in the 
15 shift register 275 provided the stored value is a logical zero. The shift register is enabled for 
shifting via AND gate 280. Again this circuit is a typical one, other arrangements such as 
allowing a new bit to be acquired when the stored mistake signal is a logical one, or 
acquiring a bit whenever a stored mistake is different from the current mistake signal are 
also possible. 

20 [0020] The mistake signal apparatus is only used to define the appropriate time to 

acquire the random bit. The source of the random bit is a Linear Feedback Shift Register 
(LFSR) 285, preferably of a length of at least 64 bits using a dense polynomial as is known 
in the art. Such an LFSR produces a statistically even (nearly the same number of zeros as 
ones on average) predictable stream of bits. In order to ensure unpredictability the stimulus 

25 signal clocks the LFSR each time it rises from a low to a high signal. Thus the changes in 
the stimulus signal, which are regular, advance the LFSR each acquisition cycle. But the 
mistake apparatus decides when to acquire a bit. Since the acquisition of bits from the LFSR 
cannot be predicted the stream is random. An LFSR of 64 bits or more will produce a 
stream of bits that are nearly balanced (good enough for all practical purposes). Since the 

30 source of the bits is evenly the balanced the acquired bits are also evenly balanced. Thus, 
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the shift register produces a stream of unpredictable, but statistically even (the same number 
of zeroes and ones on average) stream of bits. The system can be visualized best by seeing 
the LFSR producing a pseudo-random stream of bits that have nearly the same number of 
zeroes as ones. The rest of circuit randomly "picks" bits from this pseudo-random stream 
producing an unpredictable random stream of bits. 

[0021] It is understood by persons of ordinary skill in the art that the examples 
illustrated and described have been provided for purposes of illustration, and not for 
limitation of the claimed invention to those illustrations. A person of ordinary skill in the 
art understand that various equivalent circuitry could be provided that does not depart from 
the spirit of the invention and the scope of the appended claims. For example, it is not 
necessary to use flip-flops for certain features, and different types of flips-flops other than 
those shown in described are satisfactory. Also, the LFSR is just one way to obtain a 
random bit by the invention, and other types of pseudo-random devices can be employed. 
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